
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6RwUX3wqthPwliJW6LohEFY3nK0.cer
File: 6RwUX3wqthPwliJW6LohEFY3nK0.cer (raw, json)
Hash identifier: p4SExTj3SvCTTXw/8uxbwl2qcl9aTe9GSR8flVvGVyA=
Subject key identifier: E9:1C:14:5F:7C:2A:B6:13:F0:96:22:56:E8:BA:21:10:56:37:9C:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FC150D1C72C0FAE2E93B88E017542C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/6RwUX3wqthPwliJW6LohEFY3nK0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:43:21 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.28.116.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fc:15:0d:1c:72:c0:fa:e2:e9:3b:88:e0:17:54:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:43:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e91c145f7c2ab613f0962256e8ba211056379cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:d1:9c:a4:b9:33:8c:6a:df:76:12:1a:06:
9d:b8:12:df:96:2e:ec:0c:e9:56:1c:1b:b8:49:e8:
a7:67:b4:4d:9d:6f:fa:6c:31:ab:ec:c7:79:5c:7e:
99:0c:c2:14:4e:ef:93:a1:32:06:b6:22:13:13:81:
6f:90:90:b0:77:a6:00:7e:37:80:24:85:b3:65:1b:
9a:2c:79:91:d3:da:e0:33:4e:4f:b2:09:63:d7:5c:
8c:1e:e4:d9:5e:0c:5e:3b:37:cf:60:49:58:ac:51:
98:34:70:ca:fa:94:7d:9e:97:d7:0f:4d:5f:57:81:
d2:3c:e2:3d:90:fa:5d:e8:e6:21:7b:40:06:63:9a:
aa:54:e7:99:a7:71:ee:f5:89:3f:0c:7f:84:b0:89:
16:ae:c8:38:e0:81:2d:7a:ff:39:95:7b:dc:27:52:
c7:e8:a0:55:2e:83:23:90:19:e5:14:70:20:a8:b5:
64:49:e5:bb:87:ec:f8:ad:ad:78:f2:c9:60:9d:06:
68:91:cd:73:0c:9f:ba:83:be:21:1b:36:1b:4d:5a:
f3:2b:4c:11:14:e5:35:c6:af:0a:83:17:5c:c0:9a:
fe:10:ee:94:ff:97:a4:23:b3:56:1e:6e:ce:94:39:
8c:49:f3:58:b1:c6:f0:e6:a8:28:ae:7a:8c:36:05:
3f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1C:14:5F:7C:2A:B6:13:F0:96:22:56:E8:BA:21:10:56:37:9C:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/6RwUX3wqthPwliJW6LohEFY3nK0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.116.0/24
Signature Algorithm: sha256WithRSAEncryption
46:69:b5:53:b9:f4:dd:c6:6d:6e:c6:57:79:c2:08:f2:1e:ab:
f4:98:19:9d:71:23:19:5f:82:71:80:11:d4:04:98:d7:08:33:
51:60:c0:a8:7b:be:bd:a1:64:01:1e:9d:ca:df:35:64:58:4c:
25:6b:64:2d:19:74:ac:72:da:a6:e3:25:d5:d7:dd:03:64:3d:
26:ec:9d:cd:88:10:25:92:a0:09:88:0d:9b:8a:f8:45:56:4d:
b5:92:65:ea:90:a7:1f:a4:d2:2c:3d:f7:a8:a5:df:4b:ad:a3:
64:5f:cb:74:f0:bc:20:f7:cd:c1:15:a1:25:2f:d5:e1:dd:86:
70:ca:f4:b3:e4:33:aa:b6:aa:b0:ed:94:b3:75:c7:ca:a9:a9:
11:8a:73:e3:67:e3:12:b7:6d:80:19:bb:8a:62:4a:49:a5:c2:
75:96:c0:34:24:26:09:48:a6:62:2c:53:3e:e8:4e:4c:77:56:
43:51:b4:07:59:0e:5f:7c:5d:ac:c1:aa:e4:6d:f6:2e:9f:41:
91:40:61:bd:9b:63:83:0b:2f:19:52:d1:85:30:8e:ca:46:4f:
df:d8:c8:92:30:b7:23:e6:53:64:e5:46:cf:15:3f:10:bf:66:
f3:43:df:8a:b5:aa:48:c4:11:93:60:dc:74:32:bc:83:d3:89:
22:a9:40:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:21 2026 by rpki-client